Analysis
- max time kernel
46s - max time network
150s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
06/07/2026, 12:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
continuity.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
continuity.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
continuity.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target continuity.apk
- Size 3.9MB
- Sample260706-pdvsqaex51
- SHA256 67ed6199c72c2af4a9f1c9b98d3d2dca077621f05776eca3d4d852e084bea34a
- MD5 fcfa6797d5530e64d86c36420476eb75
- SHA1 141ed060d7d7dc53f25f9cc9b29290c6607f0897
- SHA512 6175a881bcef40ffff521ec365b971ce4e563fc83951bef233848505a9362c50a2b3580da633eee9e24631ccc81a7801af8163572b2c5c88fc6194673128931d
- SSDEEP 98304:CJE1vXCABbS/XT7v/Hd8/2ZYJepZGRl1K:CJEFXCABeb7Hd8/T2iy
- TLSH T153160292E7E50EAFCC7A45364FDB1B3126A58F0A9693C3078614722D6D773C90E49BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener tv.continuity.app - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo tv.continuity.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo tv.continuity.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/tv.continuity.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 2bfc27a47643edb27d6d3fac3edbf05572c0081147223d3e3b106bdcad2d6c4e
- MD5 8101b49ca7d69ec6b3fe7609068c2815
- SHA1 7688bda13605052e509275ab42ccace92adf5bbc
- SHA512 5f48b9f946b98e4ec68a4f932c528ab46db77dd49fb8aa1c1b9ea86733b5044c9958185cb904c1d74924cae3700fd0e0233c6098e8c9f00bf7fe56cd60c76772
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/tv.continuity.app/primary.prof
- Size 2KB
- SHA256 82948dfd1734c8f90713506ecd645ad07a54307aada1be30f358c2aa41e2eaae
- MD5 e79ea00b5e53fa9e5330c0fa283738f5
- SHA1 b41c1560b17cab00fef2e52c05f359b23ec1d1a1
- SHA512 b67b13c02819b6a03ad27ad20f789edfc5f8340f5d7b0052b76236cb4bbf97bd98a4bbef92c1712627276ca6c8a896a01acac223f0e02adead9983d01aaa6e2d
- TLSH T147410BF50E52AA351276E9E72081A7B0B5B310101FFCE1009C205F5E9CE294701C4036
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/tv.continuity.app/primary.prof
- Size 4KB
- SHA256 3a1ee1029e349fe3582ed66ff9f61b134b8d86d072370bc2b6096cdde8ecad32
- MD5 e461b4c2c6fb3efa5c52565e2fb630a9
- SHA1 dff9e0c1d71a619e3a2474889a9b8f6c866f29e9
- SHA512 0a8a5d2a67e3ce3583d5511d14d05a0effd9aa4b59d46519f7b8e5468c416d0942ec868b9875341050a636a979bbddb2edeac58c8ef339d3afcbe686425066d8
- SSDEEP 96:yq3E+7TGDtH9ryp9+v9z4q0wvqSZ+RaXPxib1wZ7i9TbBlro0GN0h:87Dtduoz4q0kzfXJipw4hbBlj
- TLSH T1D8A15C663B4A7209B72E9EA131442EBC67E3A24130C35425367DF8EA13CE608CD165F9
- MD5 SHA1 SHA512 SSDEEP TLSH